registry / sf-i-events / 1.0.1106
sf-i-events@1.0.1106
Superflows Navigation Component
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
Oversized source lightweight scan
sf-i-events.js2.22 MB file, sampled 256 KB
HighEntropyStringsUrlStringscdn.jsdelivr.netcdnjs.cloudflare.comesm.runflagggrc-images.s3.amazonaws.comfonts.googleapis.comfonts.gstatic.comunpkg.com
Source & flagged code
5 flagged · loading sourcedev/templates/table-template.docxView file
•path = dev/templates/table-template.docx
kind = high_entropy_blob
sizeBytes = 5507
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dev/templates/table-template.docxView on unpkg•path = dev/templates/table-template.docx
kind = compressed_blob
sizeBytes = 5507
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
dev/templates/table-template.docxView on unpkg•path = dev/templates/table-template.docx
kind = nested_archive_needs_inspection
sizeBytes = 5507
magicHex = [redacted]
Low
Nested Archive Needs Inspection
Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
dev/templates/table-template.docxView on unpkgFindings
3 High4 Medium5 Low
HighShips High Entropy Blobdev/templates/table-template.docx
HighOversized Source Filesf-i-events.js
HighNode Builtin Dependency Squatpackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdev/templates/table-template.docx
MediumStructural Risk Force Deep Review
LowScripts Present
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectiondev/templates/table-template.docx
Affected versions and remediation
This report applies to sf-i-events@1.0.1106.
See all versions of sf-i-events for other recorded verdicts.
- Review the evidence and your use of sf-i-events@1.0.1106 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.